Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File:                     AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier:          71mHqLZySCXy/SakdiMHqS5s5dLcLaREeYbrvt280bs=
Subject key identifier:   CF:2C:60:FD:46:A1:03:AB:67:08:FA:72:DB:02:AF:AF:77:3E:C9:77
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer:       /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial:       019DA4538AB0C86C80061D9D6D04965CCCF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number:          18F5
Signing time:             Sun 19 Apr 2026 06:00:31 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:31 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:31 +0000
Files and hashes:         1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: 5Je3KV/qaMog4yNU2a5/1QNGzx3j9g2atnmP3wTLQD4=)
                          2: CPn7kuPgMKNn5b8hVVI_Z0CeOvU.roa (hash: 7mRryJiNLMo58v700Hn7pFQU6Pwy+1r0rYQZSAKixVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:8a:b0:c8:6c:80:06:1d:9d:6d:04:96:5c:cc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
        Validity
            Not Before: Apr 19 06:00:31 2026 GMT
            Not After : Apr 20 06:00:31 2026 GMT
        Subject: CN=cf2c60fd46a103ab6708fa72db02afaf773ec977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:83:7e:07:25:c3:7c:82:f7:a7:7c:f6:81:c9:
                    48:0c:ab:6b:16:4f:39:5c:48:b3:58:6e:da:22:59:
                    9a:60:85:c4:3d:8c:ad:3c:44:65:6f:f8:9f:a4:59:
                    b3:bc:81:e0:9a:e2:b2:a9:32:73:01:41:bb:5e:c8:
                    02:73:16:bb:b8:61:bd:9f:67:e3:d5:99:69:ce:a8:
                    11:8a:31:b1:98:2d:a4:1e:18:34:cc:d0:fd:17:22:
                    59:da:af:3b:f7:1a:b3:ad:de:09:6d:06:33:ab:94:
                    e9:a5:00:d3:37:c9:7f:51:90:36:fa:08:af:7a:31:
                    36:d2:4d:7b:1a:9e:63:ca:26:83:ae:c4:22:49:c9:
                    ce:83:82:f1:1f:36:d6:d5:c9:a5:6a:d3:d5:51:f3:
                    aa:d5:b5:45:f8:7e:7a:d8:9a:76:c9:7e:68:e0:eb:
                    38:a8:53:95:3d:94:5a:2f:32:03:71:de:b0:ad:25:
                    81:a1:d1:d7:d5:76:26:a6:f0:da:3b:15:4a:2e:e6:
                    7c:78:4f:37:a5:ef:5a:9f:53:51:80:95:c5:8b:72:
                    62:1e:66:e3:9b:0e:16:4d:c2:df:bc:a6:8f:fb:08:
                    e1:ae:f6:ef:0a:52:e5:26:b0:53:b0:f2:19:6f:87:
                    6f:cc:77:4d:d0:d9:a8:97:34:84:0c:03:0a:e4:41:
                    98:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2C:60:FD:46:A1:03:AB:67:08:FA:72:DB:02:AF:AF:77:3E:C9:77
            X509v3 Authority Key Identifier:
                keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:24:72:b9:b0:a0:0e:99:d4:fd:9a:9f:26:4e:da:85:a1:73:
         04:c5:5c:7c:07:b8:08:d1:99:bb:3c:23:52:38:23:7d:4b:f9:
         a6:33:61:96:12:2e:16:05:02:a2:84:c4:0f:06:a0:57:ef:d1:
         c1:0f:30:b5:84:c3:9b:c8:6c:21:b4:a3:f2:c2:40:04:f5:e3:
         df:d2:de:30:25:de:16:91:b8:64:0f:51:12:b7:be:10:69:de:
         0f:f5:70:2f:7b:a9:70:2c:21:d9:e6:df:05:2a:2b:14:c1:eb:
         54:96:03:bb:51:cf:72:41:2c:a5:70:02:8e:68:71:1c:cd:af:
         c4:d2:18:1c:bf:d9:66:71:2f:c3:8c:5d:b7:59:d0:0d:e3:f1:
         70:9f:c4:68:19:c5:fb:8a:2f:96:f1:db:51:9e:5e:24:66:4e:
         e2:9b:66:92:0a:56:67:da:3c:31:b5:f2:0b:03:df:96:86:1a:
         20:3b:b4:17:00:b4:db:97:92:f5:5a:d0:36:9e:21:d8:3c:99:
         93:ce:d6:96:93:a7:9a:fe:82:83:8a:65:78:f6:33:73:2b:02:
         fb:2f:c8:19:e2:ca:74:3c:5d:0f:2d:f0:70:8d:4f:a4:90:d5:
         da:b1:2d:1a:7f:50:d0:93:61:be:4b:ca:e3:6c:2a:cd:08:84:
         f6:a8:0d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:53 2026 by rpki-client